Overview

To detect attacks, Arkose Detect uses many data points collected on both the client and server sides. Still, it is not always obvious whether a session is valid or an attack. As a customer though, you see how sessions turn out based on how the end-user interacted with your platform. Arkose’s Truth Data system lets you provide this feedback to Arkose via the Arkose Command Center. This feedback:

• Provides Arkose with additional data points to improve our detection abilities.
• Helps customers understand why a session was a false positive via Command Center dashboards dedicated to Truth Data.

Sending Truth Data Via The Arkose Command Center

Follow these steps to upload truth data to Arkose via our Command Center:

1. Go to the Arkose Command Center and login.

2. In the left vertical menu bar, navigate to Settings, and then to Truth Data, as shown below. If you don’t see the Truth Data tab, please contact Arkose to enable it.
   

3. Use the DOWNLOAD SAMPLE FILE tab to download a file with the column headers that Arkose expects. Using this as a template for your data file greatly reduces the chances of an upload failure.

   

4. After downloading the sample file, fill in the data you want to upload to Arkose and, if desired, rename it to what you consider appropriate. The mandatory and optional fields shown here are described below in the Truth Data API Fields table.

5. When you finish entering your data, save it and click on the UPLOAD DATA tab. You will see an Import data from CSV… message as shown below. Select the file you want to upload and click the UPLOAD FILES button. Note that you can only upload one file at a time. The maximum file size is 100 MB. After uploading, you will see a status screen as shown below. Note that it may take up to 30 minutes to upload the file.

6. Once the file is successfully uploaded, a Zendesk ticket file automatically opens under your Arkose account. You will be notified of any Arkose SOC analysis, recommendations, or telltale modifications or creations via the Zendesk ticket.

Sending Truth Data via New API

To automatically send Truth Data to Arkose, please follow the steps below:

Step 1: Create a Client ID and Client Secret pair via Arkose Command Center. You can do this by navigating to the sidebar > Tokens > Create Token. Add a description for your use. This is a one-time action and the same ID and Secret can be used by all the keys under your account.

Step 2: Generate an authorization token for the client ID and secret by calling https://client-api.arkoselabs.com/truth_data_api/v1/authorize.

Request Body:

{
  "client_id": "",
  "client_secret": ""
}

This method then verifies and authenticates the client id and secret via Auth0. Auth0 creates an access token that is valid for 24 hours. You need to get an authorization token every 24 hours.

{
    "access_token": "<token>"
    "token_type": "Bearer",
    "expires_in": 86400
}

Step 3: Use the token received to invoke Arkose Labs Truth Data API. API URL: https://client-api.arkoselabs.com/truth_data_api/v1/stream_data

The request body needs to be as follows:

Request Header:
{
   Authorization: [Bearer <token>]
}
Request Body:
{
   "arkose_session_id": "32560e3747191b697.1304102202", // mandatory
   "public_key": "D6A0C8E8-F7E7-4A39-A515-5BE578369101", // mandatory
   "session_create_timestamp": "2021-10-30 12:31:29", // optional
   "decision_timestamp": "2021-10-30 12:31:30", // optional
   "is_legit": 0, // mandatory
   "event_type": 2, // optional
   "fraud_category": 3, // optional
   "fraud_type": 2 // optional
}

📘

Please let your account representative know if you can’t see the Tokens tab on Portal.

Truth Data API Fields

For the optional fields that accept string enums, Arkose improves our analysis by doing a strict validation against the defined enums. Please contact us if you want an additional enum added to the list.